This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/1-rE3wlDYZ_nvWhltxz_4ZpYbcwE.roa File: 1-rE3wlDYZ_nvWhltxz_4ZpYbcwE.roa (raw, json) Hash identifier: lxJM0yp38CMuJhzvgdClARahcygYW4cDppmkKEHKc6o= Subject key identifier: FA:B1:37:C2:50:D8:67:F9:EF:5A:19:6D:C7:3F:F8:66:96:1B:73:01 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019BB60BE1CF01DAA64BC97C2DCAD445AA67 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/1-rE3wlDYZ_nvWhltxz_4ZpYbcwE.roa Signing time: Tue 13 Jan 2026 06:29:50 +0000 ROA not before: Tue 13 Jan 2026 06:29:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 7843 IP address blocks: 151.240.155.0/24 maxlen: 24 151.247.202.0/24 maxlen: 24 151.247.203.0/24 maxlen: 24 151.247.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b6:0b:e1:cf:01:da:a6:4b:c9:7c:2d:ca:d4:45:aa:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 13 06:29:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fab137c250d867f9ef5a196dc73ff866961b7301 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:25:4a:14:42:c1:a5:58:96:d2:6f:63:77:54: ea:77:94:eb:c3:bf:9b:40:f7:de:ee:3f:01:fd:bd: 0c:14:a0:2f:d3:d8:fd:95:90:44:9f:51:b9:e8:85: bf:76:cc:78:4b:75:06:3c:68:7b:f8:8a:28:bb:45: af:de:a1:e1:27:97:62:29:71:d5:a4:ac:02:a0:37: 4c:22:96:2c:b4:ce:17:43:03:1d:b2:a8:63:87:f4: 62:4c:18:5f:11:ff:39:dc:c0:83:02:91:b9:81:f3: 3c:ba:79:6b:bf:0a:bc:42:35:11:95:87:38:4d:31: 19:81:8b:da:e6:a4:5d:d4:d9:4f:74:8b:fc:93:28: ed:bf:2c:25:36:24:4c:f9:84:b3:dd:40:f6:19:32: 7b:ca:1b:bb:b2:9e:9c:39:4f:46:53:7f:91:75:33: 4f:62:9d:34:35:62:a1:b4:bc:0b:cc:2a:3d:9d:fb: 19:9d:46:b3:22:ab:e8:fd:eb:16:fa:d5:7e:b7:d8: dd:e1:ca:60:69:e9:3c:8a:cb:cc:c2:81:28:f3:88: bc:3b:b4:a2:af:17:6a:ef:35:60:81:96:8b:50:27: 85:9f:51:80:ae:3f:9e:00:08:12:e1:35:7c:9e:df: 4f:d0:36:15:33:68:93:9d:08:06:38:dc:90:49:01: c0:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:B1:37:C2:50:D8:67:F9:EF:5A:19:6D:C7:3F:F8:66:96:1B:73:01 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/1-rE3wlDYZ_nvWhltxz_4ZpYbcwE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.240.155.0/24 151.247.202.0-151.247.204.255 Signature Algorithm: sha256WithRSAEncryption 18:69:cc:d3:a0:27:17:ee:f1:fc:b5:9f:6f:94:68:8f:05:ff: 92:5e:f7:d7:17:c3:98:cf:27:a2:1d:75:c5:4c:28:46:3b:c1: 08:28:49:57:70:6a:38:68:10:4d:e9:36:c0:24:af:e1:05:a7: d2:3b:e1:2f:3f:c4:ea:fd:5f:7a:e0:91:d9:f6:6c:6b:e0:fb: dc:f5:e3:e7:13:65:bc:ae:48:41:8e:e9:c5:7b:36:19:08:35: 77:0f:10:2b:b2:46:c9:70:23:de:4f:d0:30:35:63:a5:9a:38: 76:02:46:c2:65:b6:a0:a6:0a:eb:72:2c:3d:0a:c7:3f:54:f5: 07:54:e5:78:60:49:a1:f9:85:f9:04:bc:ba:2f:f9:f0:af:62: a1:48:cc:c4:ec:69:f3:f6:14:a0:dd:bc:a8:15:4c:4f:d2:23: 60:62:4f:6a:3e:f2:b3:b3:4a:3d:7c:5b:cf:02:f8:b5:54:cc: 07:3c:e6:87:06:80:5d:59:9c:94:85:86:a4:82:dc:ea:4c:16: b3:76:65:84:6e:c7:93:43:ea:ad:57:76:51:15:a1:06:93:c6: d9:51:fb:91:55:ff:21:c9:c3:76:6a:40:96:61:32:f4:82:72: f8:72:47:e9:92:12:82:92:88:73:1c:f9:83:2d:3d:ba:04:3e: df:3a:1c:36 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZu2C+HPAdqmS8l8LcrURapnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTEzMDYyOTUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYWIxMzdjMjUwZDg2N2Y5ZWY1YTE5NmRjNzNmZjg2Njk2MWI3MzAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApiVKFELBpViW0m9jd1Tqd5Trw7+b QPfe7j8B/b0MFKAv09j9lZBEn1G56IW/dsx4S3UGPGh7+Ioou0Wv3qHhJ5diKXHV pKwCoDdMIpYstM4XQwMdsqhjh/RiTBhfEf853MCDApG5gfM8unlrvwq8QjURlYc4 TTEZgYva5qRd1NlPdIv8kyjtvywlNiRM+YSz3UD2GTJ7yhu7sp6cOU9GU3+RdTNP Yp00NWKhtLwLzCo9nfsZnUazIqvo/esW+tV+t9jd4cpgaek8isvMwoEo84i8O7Si rxdq7zVggZaLUCeFn1GArj+eAAgS4TV8nt9P0DYVM2iTnQgGONyQSQHA4wIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFPqxN8JQ2Gf571oZbcc/+GaWG3MBMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvMS1yRTN3bERZWl9udldobHR4el80WnBZYmN3RS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvOGUvZjQzYjFkLTllNTAtNDU1MS1hZTZhLTE3YjlkZTE0MTI1 Mi8xL3htSm05R2I3SkppamxGbXpOUzJpVVZHbHBNQS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAtBggrBgEFBQcBBwEB/wQeMBwwGgQCAAEwFAMEAJfwmzAM AwQBl/fKAwQAl/fMMA0GCSqGSIb3DQEBCwUAA4IBAQAYaczToCcX7vH8tZ9vlGiP Bf+SXvfXF8OYzyeiHXXFTChGO8EIKElXcGo4aBBN6TbAJK/hBafSO+EvP8Tq/V96 4JHZ9mxr4Pvc9ePnE2W8rkhBjunFezYZCDV3DxArskbJcCPeT9AwNWOlmjh2AkbC Zbagpgrrciw9Csc/VPUHVOV4YEmh+YX5BLy6L/nwr2KhSMzE7Gnz9hSg3byoFUxP 0iNgYk9qPvKzs0o9fFvPAvi1VMwHPOaHBoBdWZyUhYakgtzqTBazdmWEbseTQ+qt V3ZRFaEGk8bZUfuRVf8hycN2akCWYTL0gnL4ckfpkhKCkohzHPmDLT26BD7fOhw2 -----END CERTIFICATE-----Generated at Sun Jan 18 06:31:26 2026 by rpki-client